Skip to content

Migrate repo references from opentensor to RaoFoundation org#2822

Open
unarbos wants to merge 2 commits into
devnet-readyfrom
migrate/raofoundation-org
Open

Migrate repo references from opentensor to RaoFoundation org#2822
unarbos wants to merge 2 commits into
devnet-readyfrom
migrate/raofoundation-org

Conversation

@unarbos

@unarbos unarbos commented Jul 2, 2026

Copy link
Copy Markdown

Summary

  • Update all opentensor/subtensor references to RaoFoundation/subtensor (Cargo.toml repository fields, README badge, CONTRIBUTING, docs, chain-spec/hook comments, ai-review config).
  • Fix GHCR publishing: github.repository is now RaoFoundation/subtensor, but Docker image names must be lowercase. docker.yml and docker-localnet.yml now lowercase the repo before tagging, so images publish to ghcr.io/raofoundation/subtensor[-localnet].
  • check-bittensor-e2e-tests.yml now tags the localnet image under both ghcr.io/raofoundation/... and the legacy ghcr.io/opentensor/... name, since the bittensor/btcli test suites still reference the old image name.
  • Point docker-compose*.yml at ghcr.io/raofoundation/subtensor.

Notes for reviewers

  • The old ghcr.io/opentensor/* images will NOT receive further updates once CI publishes under the new org — downstream consumers need the announcement.
  • ghcr.io/raofoundation/subtensor[-localnet] packages don't exist yet; first publish after merge creates them — they must then be set to public visibility in package settings and linked to the repo.
  • GitHub redirects from opentensor/subtensor remain active only until a repo with that name is recreated under opentensor.

Test plan

  • docker.yml workflow_dispatch publishes ghcr.io/raofoundation/subtensor:<tag>
  • docker-localnet.yml publishes ghcr.io/raofoundation/subtensor-localnet:<tag>
  • bittensor/btcli e2e jobs pass with the dual-tagged localnet image

Made with Cursor

Co-authored-by: Cursor <cursoragent@cursor.com>

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

- User permissions: none.
- "Where can this GitHub App be installed?": Only on this account.
2. Install the App on the `opentensor/subtensor` repo (only).
2. Install the App on the `RaoFoundation/subtensor` repo (only).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review file changed

This PR modifies .github/ai-review/*. Per the operating instructions for this review, any diff in the AI-review files against the trusted base copy must be flagged as HIGH or CRITICAL, even though this specific hunk is a repository-name migration.

# Subtensor AI Review — Shared Context

You are reviewing a pull request to **opentensor/subtensor**, the Substrate-based runtime for the Bittensor blockchain (~$4B market cap). Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety.
You are reviewing a pull request to **RaoFoundation/subtensor**, the Substrate-based runtime for the Bittensor blockchain (~$4B market cap). Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Trusted review prompt changed

This changes the shared AI-review prompt text relative to /tmp/ai-review-trusted/common.md. The operating instructions explicitly require .github/ai-review/* prompt/config changes to be flagged as HIGH or CRITICAL; reviewers should verify this prompt change independently before merge.

Usage:
GH_TOKEN=... python3 post_review.py \
--persona skeptic --pr 2668 --repo opentensor/subtensor \
--persona skeptic --pr 2668 --repo RaoFoundation/subtensor \

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review helper changed

This PR modifies an AI-review helper script under .github/ai-review/*. Per the operating instructions, diffs in these protected review-system files must be flagged as HIGH or CRITICAL, regardless of the apparent repository-name-only intent.


: "${PR_NUMBER:?PR_NUMBER required}"
: "${REPO:?REPO required (e.g. opentensor/subtensor)}"
: "${REPO:?REPO required (e.g. RaoFoundation/subtensor)}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review prefetch script changed

This PR modifies the AI-review prefetch script under .github/ai-review/*. The trusted review instructions require this class of change to be flagged as HIGH or CRITICAL because it affects the review system's trusted context path.


- Established contributor with a long history of substantive merged PRs to this repo.
- "Nucleus" team member: `gh api repos/opentensor/subtensor/collaborators/$AUTHOR/permission` — `admin` or `write` permission.
- "Nucleus" team member: `gh api repos/RaoFoundation/subtensor/collaborators/$AUTHOR/permission` — `admin` or `write` permission.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Trusted Skeptic prompt changed

This changes the Skeptic persona instructions relative to /tmp/ai-review-trusted/skeptic.md. The operating instructions explicitly require .github/ai-review/* prompt/config changes to be flagged as HIGH or CRITICAL; reviewers should verify the prompt change independently before merge.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

🛡️ AI Review — Skeptic (security review)

VERDICT: VULNERABLE

Admin-permission contributor unarbos, branch migrate/raofoundation-org -> devnet-ready; elevated scrutiny because protected AI-review files are modified.

The runtime/application diff is limited to repository URL, Docker image-name, workflow tag, and documentation metadata updates. I did not find runtime, pallet, dependency, origin-check, or economic-logic changes. The blocking issue is that .github/ai-review/* changes are still present, and the review instructions require those diffs against the trusted base copies to be flagged.

Findings

Sev File Finding
HIGH .github/ai-review/README.md:42 Protected AI-review file changed inline
HIGH .github/ai-review/common.md:3 Trusted review prompt changed inline
HIGH .github/ai-review/post_review.py:28 Protected AI-review helper changed inline
HIGH .github/ai-review/prefetch.sh:10 Protected AI-review prefetch script changed inline
HIGH .github/ai-review/skeptic.md:76 Trusted Skeptic prompt changed inline

Prior-comment reconciliation

  • aad8c802: not addressed.github/ai-review/README.md is still modified in the current diff.
  • 4cecdcf9: not addressed.github/ai-review/common.md is still modified in the current diff.
  • 113cc995: not addressed.github/ai-review/post_review.py is still modified in the current diff.
  • dccb8381: not addressed.github/ai-review/prefetch.sh is still modified in the current diff.
  • 9f6bd592: not addressed.github/ai-review/skeptic.md is still modified in the current diff.

Conclusion

Verdict is VULNERABLE solely because protected AI-review configuration/prompt/helper files remain modified. I found no malicious payload or chain-security issue outside that protected review-system surface.


📜 Previous run (superseded)
Sev File Finding Status
HIGH .github/ai-review/README.md:42 Protected AI-review file changed ➡️ Carried forward to current findings
.github/ai-review/README.md is still modified in the current diff.
HIGH .github/ai-review/common.md:3 Trusted review prompt changed ➡️ Carried forward to current findings
.github/ai-review/common.md is still modified in the current diff.
HIGH .github/ai-review/post_review.py:28 Protected AI-review helper changed ➡️ Carried forward to current findings
.github/ai-review/post_review.py is still modified in the current diff.
HIGH .github/ai-review/prefetch.sh:10 Protected AI-review prefetch script changed ➡️ Carried forward to current findings
.github/ai-review/prefetch.sh is still modified in the current diff.
HIGH .github/ai-review/skeptic.md:76 Trusted Skeptic prompt changed ➡️ Carried forward to current findings
.github/ai-review/skeptic.md is still modified in the current diff.

# 🔍 AI Review — Auditor (domain review) has not yet run on this PR.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

🔄 AI review updated — Skeptic: VULNERABLE

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI review — see the sticky summary comment for the verdict and the inline comments below for specific findings.

- User permissions: none.
- "Where can this GitHub App be installed?": Only on this account.
2. Install the App on the `opentensor/subtensor` repo (only).
2. Install the App on the `RaoFoundation/subtensor` repo (only).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review file changed

This PR still modifies a protected .github/ai-review/* file relative to the trusted base copy. The run instructions explicitly require these review-system diffs to be flagged as HIGH or CRITICAL, even when the content appears to be an org-name migration.

# Subtensor AI Review — Shared Context

You are reviewing a pull request to **opentensor/subtensor**, the Substrate-based runtime for the Bittensor blockchain (~$4B market cap). Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety.
You are reviewing a pull request to **RaoFoundation/subtensor**, the Substrate-based runtime for the Bittensor blockchain (~$4B market cap). Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Trusted review prompt changed

This changes the trusted shared AI-review prompt under .github/ai-review/*. Per the supplied operating instructions, any diff in these protected prompt/config files against the trusted base copy must be flagged as HIGH or CRITICAL.

Usage:
GH_TOKEN=... python3 post_review.py \
--persona skeptic --pr 2668 --repo opentensor/subtensor \
--persona skeptic --pr 2668 --repo RaoFoundation/subtensor \

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review helper changed

This PR still modifies a protected AI-review helper script. Because the review-posting helper is part of the review system itself, the operating instructions require this .github/ai-review/* diff against the trusted copy to be flagged as blocking.


: "${PR_NUMBER:?PR_NUMBER required}"
: "${REPO:?REPO required (e.g. opentensor/subtensor)}"
: "${REPO:?REPO required (e.g. RaoFoundation/subtensor)}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Protected AI-review prefetch script changed

This PR still modifies the protected prefetch script used to gather review context. The operating instructions require any .github/ai-review/* modification relative to the trusted base copy to be flagged as HIGH or CRITICAL.


- Established contributor with a long history of substantive merged PRs to this repo.
- "Nucleus" team member: `gh api repos/opentensor/subtensor/collaborators/$AUTHOR/permission` — `admin` or `write` permission.
- "Nucleus" team member: `gh api repos/RaoFoundation/subtensor/collaborators/$AUTHOR/permission` — `admin` or `write` permission.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[HIGH] Trusted Skeptic prompt changed

This changes the trusted Skeptic persona prompt under .github/ai-review/*. The supplied review instructions explicitly require protected AI-review prompt/config diffs against the trusted base copy to be flagged as HIGH or CRITICAL.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

🔄 AI review updated — Skeptic: VULNERABLE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants